В терминале (через ssh, в терминале web-клиента не получилось) сначала добавил global-ip:
system-view
vsys name MainNetwork
assign global-ip 10.200.200.201 10.200.200.201 exclusive
в MainNetwork добавил nat policy «Hairpin_ServiceDesk_SNAT» с «Destination Address Translation Mode» равным «One-to-one mapping between the public address and private port in translation»
nat-policy
rule name Hairpin_ServiceDesk_SNAT source-zone trust source-address 192.168.0.0 mask 255.255.254.0 destination-address address-set ServiceDeskExternal service protocol tcp source-port 0 to 65535 destination-port 8083 action source-nat address-group SD_Hairpin_pool action destination-nat static address-to-port address 192.168.0.248 8080
SD_Hairpin_pool сделал равным 10.200.200.201:
|
nat address-group SD_Hairpin_pool 2
|
|
mode pat
|
|
section 0 10.200.200.201 10.200.200.201
|
Ctrl+z
save all